Zen

Source string Source string

148/10000 · 148

The string is read only.

English Actions
First, the source drive that hosts the folder we wish to bind mount should be defined, so that the bind mount can depend on it.
(define source-drive ;; "source-drive" can be named anything you want.
(file-system
(device (uuid "UUID goes here"))
(mount-point "/path-to-spinning-disk-goes-here")
(type "ext4"))) ;Make sure to set this to the appropriate type for your drive.
The source folder must also be defined, so that guix will know it's not a regular block device, but a folder.
;; "source-directory" can be named any valid variable name.
(define (%source-directory) "/path-to-spinning-disk-goes-here/tmp")
Finally, inside the @code{file-systems} definition, we must add the mount itself.
(file-systems (cons*
...<other drives omitted for clarity>...
;; Must match the name you gave the source drive in the earlier definition.
source-drive
(file-system
;; Make sure "source-directory" matches your earlier definition.
(device (%source-directory))
(mount-point "/tmp")
;; We are mounting a folder, not a partition, so this type needs to be "none"
(type "none")
(flags '(bind-mount))
;; Ensure "source-drive" matches what you've named the variable for the drive.
(dependencies (list source-drive))
)
...<other drives omitted for clarity>...
))
Guix daemon can use a HTTP proxy to get substitutes, here we are configuring it to get them via Tor.
Warning
@emph{Not all} Guix daemon's traffic will go through Tor! Only HTTP/HTTPS will get proxied; FTP, Git protocol, SSH, etc connections will still go through the clearnet. Again, this configuration isn't foolproof some of your traffic won't get routed by Tor at all. Use it at your own risk.
Also note that the procedure described here applies only to package substitution. When you update your guix distribution with @command{guix pull}, you still need to use @command{torsocks} if you want to route the connection to guix's git repository servers through Tor.
Guix's substitute server is available as a Onion service, if you want to use it to get your substitutes through Tor configure your system as follow:
(use-modules (gnu))
(use-service-module base networking)
(operating-system
…
(services
(cons
(service tor-service-type
(tor-configuration
(config-file (plain-file "tor-config"
"HTTPTunnelPort 127.0.0.1:9250"))))
(modify-services %base-services
(guix-service-type
config => (guix-configuration
(inherit config)
;; ci.guix.gnu.org's Onion service
(substitute-urls "\
@value{SUBSTITUTE-TOR-URL}")
(http-proxy "http://localhost:9250")))))))
This will keep a tor process running that provides a HTTP CONNECT tunnel which will be used by @command{guix-daemon}. The daemon can use other protocols than HTTP(S) to get remote resources, request using those protocols won't go through Tor since we are only setting a HTTP tunnel here. Note that @code{substitutes-urls} is using HTTPS and not HTTP or it won't work, that's a limitation of Tor's tunnel; you may want to use @command{privoxy} instead to avoid such limitations.
If you don't want to always get substitutes through Tor but using it just some of the times, then skip the @code{guix-configuration}. When you want to get a substitute from the Tor tunnel run:
sudo herd set-http-proxy guix-daemon http://localhost:9250
guix build \
--substitute-urls=@value{SUBSTITUTE-TOR-URL} @dots{}
nginx, lua, openresty, resty
NGINX could be extended with Lua scripts.
Guix provides NGINX service with ability to load Lua module and specific Lua packages, and reply to requests by evaluating Lua scripts.
The following example demonstrates system definition with configuration to evaluate @file{index.lua} Lua script on HTTP request to @uref{http://localhost/hello} endpoint:
local shell = require "resty.shell"
local stdin = ""
local timeout = 1000 -- ms
local max_size = 4096 -- byte
local ok, stdout, stderr, reason, status =
shell.run([[/run/current-system/profile/bin/ls /tmp]], stdin, timeout, max_size)
ngx.say(stdout)
(use-modules (gnu))
(use-service-modules #;… web)
(use-package-modules #;… lua)
(operating-system
;; …
(services
;; …
(service nginx-service-type
(nginx-configuration
(modules
(list
(file-append nginx-lua-module "/etc/nginx/modules/ngx_http_lua_module.so")))
(lua-package-path (list lua-resty-core
lua-resty-lrucache
lua-resty-signal
lua-tablepool
lua-resty-shell))
(lua-package-cpath (list lua-resty-signal))
(server-blocks
(list (nginx-server-configuration
(server-name '("localhost"))
(listen '("80"))
(root "/etc")
(locations (list
(nginx-location-configuration
(uri "/hello")
(body (list #~(format #f "content_by_lua_file ~s;"
#$(local-file "index.lua"))))))))))))))
mpd

Loading…

User avatar felsoci

Comment added

  1. guix
  2. documentation-cookbook
  3. English

a Onion service --> an Onion service

a year ago
User avatar roptat

Comment added

  1. guix
  2. documentation-cookbook
  3. English

Two verbs in the same sentence

3 years ago
Browse all string changes
User avatar roptat

Source string comment

Two verbs in the same sentence

3 years ago
User avatar felsoci

Source string comment

a Onion service --> an Onion service

a year ago

Things to check

Comments

There are 2 unresolved comments for this string.

View

Glossary

English English
No related strings found in the glossary.

String information

Source string description
type: Plain text
Flags
read-only
Source string location
guix-git/doc/guix-cookbook.texi:3031
String age
3 years ago
Last updated
yesterday
Source string age
3 years ago
Translation file
po/doc/guix-cookbook.pot, string 694